tailscale/net
Brad Fitzpatrick 8009ad74a3 cmd/derper, net/tlsdial: fix client's self-signed cert validation
This fixes the implementation and test from #15208 which apparently
never worked.

Ignore the metacert when counting the number of expected certs
presented.

And fix the test, pulling out the TLSConfig setup code into something
shared between the real cmd/derper and the test.

Fixes #15579

Change-Id: I90526e38e59f89b480629b415f00587b107de10a
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2025-05-19 10:57:28 -07:00
..
art all: fix new lint warnings from bumping staticcheck 2024-08-22 12:31:08 -07:00
bakedroots net/bakedroots: add LetsEncrypt ISRG Root X2 2025-01-21 17:47:55 -08:00
captivedetection tailcfg: add DERPRegion.NoMeasureNoHome, deprecate+document Avoid [cap 115] 2025-03-07 23:15:38 -07:00
connstats {net/connstats,wgengine/magicsock}: fix packet counting in connstats 2024-10-14 14:17:56 +02:00
dns net/dns,docs/windows/policy,util/syspolicy: register Tailscale IP addresses in AD DNS if required by policy 2025-05-12 11:31:12 -05:00
dnscache net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 2025-04-08 10:07:47 -07:00
dnsfallback net/netmon: publish events to event bus 2025-04-16 10:10:45 -07:00
flowtrack net/flowtrack: fix, test String method 2024-06-18 21:44:44 -07:00
ipset all: use iterators over slice views more 2024-11-11 13:22:34 -08:00
ktimeout various: disable MPTCP when setting TCP_USER_TIMEOUT sockopt (#15063) 2025-02-19 10:41:45 -08:00
memnet net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 2025-04-08 10:07:47 -07:00
netaddr all: update copyright and license headers 2023-01-27 15:36:29 -08:00
netcheck all: use network less when running in v86 emulator 2025-04-02 07:36:04 -07:00
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 2023-04-04 16:32:16 -07:00
netkernelconf all: remove non-applicable "linux" deps on Android 2025-05-07 21:05:13 -07:00
netknob all: update copyright and license headers 2023-01-27 15:36:29 -08:00
netmon net/netmon: publish events to event bus 2025-04-16 10:10:45 -07:00
netns all: remove non-applicable "linux" deps on Android 2025-05-07 21:05:13 -07:00
netstat all: add test for package comments, fix, add comments as needed 2024-07-10 09:57:00 -07:00
netutil net/netmon: publish events to event bus 2025-04-16 10:10:45 -07:00
netx net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 2025-04-08 10:07:47 -07:00
packet net/packet: implement Geneve header serialization (#15301) 2025-03-13 13:33:26 -07:00
ping net/ping: fix ICMP echo code field to 0 2023-09-15 17:08:39 -07:00
portmapper net/portmapper: fix test flakes from logging after test done 2025-04-25 15:54:05 -07:00
proxymux all: cleanup unused code, part 1 (#10661) 2023-12-20 14:50:30 -08:00
routetable net/routetable: don't try to fetch the route table on android 2025-04-03 14:37:14 -07:00
socks5 net/socks5: optimize UDP relay 2024-11-01 15:47:52 -07:00
sockstats net/sockstats: prevent crash in setNetMon (#13985) 2024-10-31 12:00:34 -07:00
speedtest all: update copyright and license headers 2023-01-27 15:36:29 -08:00
stun ci: enable checklocks workflow for specific packages 2024-06-26 13:55:07 -04:00
stunserver all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
tcpinfo all: use Go 1.22 range-over-int 2024-04-16 15:32:38 -07:00
tlsdial cmd/derper, net/tlsdial: fix client's self-signed cert validation 2025-05-19 10:57:28 -07:00
tsaddr net/tsaddr: include test input in test failure output 2024-11-21 08:32:38 -08:00
tsdial net/tsdial: update (*Dialer).SetRoutes() to log the size of the resulting bart.Table 2025-05-09 16:43:01 -05:00
tshttpproxy all: fix golangci-lint errors 2025-01-07 13:05:37 -08:00
tstun net/tstun: don't try to set link attributes on android 2025-04-03 14:37:14 -07:00
udprelay net/udprelay{/endpoint}: move ServerEndpoint tests (#15949) 2025-05-12 09:25:59 -07:00
wsconn go.{mod,sum}: migrate from nhooyr.io/websocket to github.com/coder/websocket 2024-08-14 21:23:49 -07:00